Privacy Policy
Last updated: 2026-07-01.
This page explains how Raconte collects, uses and protects personal data from users and from people invited to take part in an interview (the “Invitees”). Protecting your data is a priority, and this policy applies alongside our terms.
1. Data controller and roles
For data related to your account and to running the service (sign-up, billing, security), Raconte acts as data controller, whose identity and contact details are set out in our legal notice. You can reach our data protection officer (DPO) at contact@raconte.ai.
For the data you submit and collect through interviews (prompts, invitations, transcripts and Invitee recordings), you act as data controller and Raconte acts as data processor: we process this data only to provide the service and according to your instructions.
2. Data we collect
We collect only what the service needs to work.
- Account: name, email, organization, interface language.
- Interviews: prompts, selected voice, metadata of invitations sent (name, email, status, dates).
- Conversations: text transcripts and audio recordings of interviews with Invitees, along with the related summaries and sentiment analyses.
- Billing: currency, history of top-ups and consumption. Payment data (bank card) is processed directly by Stripe and does not pass through our servers.
- Technical: access logs, session identifiers, strictly necessary cookies, usage telemetry.
Providing account data is necessary to create an account and use the service: without it, the service cannot be provided.
3. Purposes
- Provide the service: run interviews, return transcripts, summaries and analyses, manage the prepaid wallet.
- Keep the service safe: prevent fraud and abuse, protect accounts.
- Improve the product: aggregated and anonymized usage analysis.
- Meet our legal, accounting and tax obligations.
4. Legal bases
Depending on the case, processing relies on performance of the contract (providing the service and managing your account), your consent, compliance with a legal obligation, or our legitimate interest in securing and improving the service. Obtaining the Invitees’ consent to be interviewed is your responsibility as data controller.
5. Interviews and invited people
When you invite someone to an interview, the AI runs a voice conversation and records their answers in order to produce a transcript and the related analyses. Before the interview starts, the Invitee gives consent by ticking a box confirming that they consent to take part in this recorded interview and accept the terms; recording only begins afterwards.
As data controller, it is your responsibility to inform the Invitee of the purpose of the interview and of the identity of the data controller, and to ensure a legal basis for the processing you carry out. We provide the technical means to exercise Invitees’ rights (access, erasure) through your account.
The Invitee’s contact details (name, email) that you provide to us come from you, not from the Invitee directly. Since an interview is an open conversation, the Invitee may disclose sensitive data within the meaning of Article 9 of the GDPR (for example about health or opinions). We encourage you not to solicit such information; where it occurs, it is your responsibility to obtain the explicit consent required.
6. Subprocessors
We rely on subprocessors to host the service and carry out certain processing. Each is bound by a GDPR-compliant contract.
| Subprocessor | Role | Location |
|---|---|---|
| Scaleway | Hosting of the application, backend and database | France (EU) |
| Stripe | Payment and billing | EU (Ireland) and USA |
| Brevo | Sending transactional emails | France (EU) |
| Mistral AI | Text generation (European model) | France (EU) |
| Gradium | Speech synthesis (European voices) | France (EU) |
| Gladia | Real-time transcription | France (EU) |
The following AI vendors are used only if your organization allows non-European vendors in its settings (see “AI models and processing location” below):
| Subprocessor | Role | Location |
|---|---|---|
| OpenAI | Text generation and transcription | USA |
| ElevenLabs | Speech synthesis | USA |
This list may change as the service evolves. The up-to-date version is available on request at contact@raconte.ai.
7. AI models and processing location
AI processing of interviews (text generation, speech synthesis, transcription) may involve both European and non-European vendors.
The “Allow non-European models” option, enabled by default in your organization settings, lets the service call on the non-European vendors listed above (OpenAI, ElevenLabs). When this option is turned off, processing is handled by European vendors (Mistral for text, Gradium and Gladia for voice and transcription).
Outputs produced by the AI (summaries, sentiment analyses) are provided for information and are meant to be reviewed by a human. The service does not make any decision producing legal effects, or similarly significantly affecting you, based solely on automated processing.
8. Data location and transfers outside the EU
Data is stored within the European Union, with our host Scaleway. Some processing (payment, non-European AI models when allowed) may involve a transfer to vendors outside the EU. These transfers are framed by the appropriate safeguards provided for by the GDPR, in particular the European Commission’s Standard Contractual Clauses.
9. Retention
Transcripts and recordings are kept as long as your account is active, or according to the retention policy you set in the dashboard. When you delete your account, data is erased within 30 days, unless a legal retention obligation applies (for example accounting and billing records).
10. Security
Access to your account is protected by a password that you must keep confidential. We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, disclosure or destruction. Notify us immediately of any unauthorized use of your account.
11. Cookies
The Platform uses cookies strictly necessary for its operation (session, authentication, preferences). No analytics or advertising cookies are set without your consent. You can configure your browser to accept or refuse cookies; some features may then stop working.
12. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability regarding your personal data. Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise these rights, write to contact@raconte.ai. You may also lodge a complaint with the CNIL, the French data protection authority.
13. Protection of minors
The service is intended for adults with full legal capacity. Using the Platform requires being 18 years of age or older.
14. Changes to this policy
We may amend this policy to reflect changes in the service or in regulations. In the event of a significant change, a notice is published on the Platform.
15. Contact
For any question about this policy or to exercise your rights: contact@raconte.ai.